diff --git a/staging/src/k8s.io/api/admission/v1/generated.proto b/staging/src/k8s.io/api/admission/v1/generated.proto
index cd5c88badc8..38a0fcea60d 100644
--- a/staging/src/k8s.io/api/admission/v1/generated.proto
+++ b/staging/src/k8s.io/api/admission/v1/generated.proto
@@ -35,12 +35,15 @@ message AdmissionRequest {
   // otherwise identical (parallel requests, requests when earlier requests did not modify etc)
   // The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request.
   // It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
+  // +optional
   optional string uid = 1;
 
   // kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)
+  // +optional
   optional .k8s.io.apimachinery.pkg.apis.meta.v1.GroupVersionKind kind = 2;
 
   // resource is the fully-qualified resource being requested (for example, v1.pods)
+  // +optional
   optional .k8s.io.apimachinery.pkg.apis.meta.v1.GroupVersionResource resource = 3;
 
   // subResource is the subresource being requested, if any (for example, "status" or "scale")
@@ -90,9 +93,11 @@ message AdmissionRequest {
 
   // operation is the operation being performed. This may be different than the operation
   // requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
+  // +optional
   optional string operation = 7;
 
   // userInfo is information about the requesting user
+  // +optional
   optional .k8s.io.api.authentication.v1.UserInfo userInfo = 8;
 
   // object is the object from the incoming request.
@@ -121,9 +126,11 @@ message AdmissionRequest {
 message AdmissionResponse {
   // uid is an identifier for the individual request/response.
   // This must be copied over from the corresponding AdmissionRequest.
+  // +optional
   optional string uid = 1;
 
   // allowed indicates whether or not the admission request was permitted.
+  // +optional
   optional bool allowed = 2;
 
   // status is the result contains extra details into why an admission request was denied.
diff --git a/staging/src/k8s.io/api/admission/v1beta1/generated.proto b/staging/src/k8s.io/api/admission/v1beta1/generated.proto
index 5af234993a4..9514719baf2 100644
--- a/staging/src/k8s.io/api/admission/v1beta1/generated.proto
+++ b/staging/src/k8s.io/api/admission/v1beta1/generated.proto
@@ -35,12 +35,15 @@ message AdmissionRequest {
   // otherwise identical (parallel requests, requests when earlier requests did not modify etc)
   // The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request.
   // It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
+  // +optional
   optional string uid = 1;
 
   // kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)
+  // +optional
   optional .k8s.io.apimachinery.pkg.apis.meta.v1.GroupVersionKind kind = 2;
 
   // resource is the fully-qualified resource being requested (for example, v1.pods)
+  // +optional
   optional .k8s.io.apimachinery.pkg.apis.meta.v1.GroupVersionResource resource = 3;
 
   // subResource is the subresource being requested, if any (for example, "status" or "scale")
@@ -90,9 +93,11 @@ message AdmissionRequest {
 
   // operation is the operation being performed. This may be different than the operation
   // requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
+  // +optional
   optional string operation = 7;
 
   // userInfo is information about the requesting user
+  // +optional
   optional .k8s.io.api.authentication.v1.UserInfo userInfo = 8;
 
   // object is the object from the incoming request.
@@ -121,9 +126,11 @@ message AdmissionRequest {
 message AdmissionResponse {
   // uid is an identifier for the individual request/response.
   // This should be copied over from the corresponding AdmissionRequest.
+  // +optional
   optional string uid = 1;
 
   // allowed indicates whether or not the admission request was permitted.
+  // +optional
   optional bool allowed = 2;
 
   // status is the result contains extra details into why an admission request was denied.